CISA issues advisory on Sisense breach. Apple warns individuals of mercenary spyware attacks.

Weekly CyberWire briefing summarizing multiple active cyber incidents and intelligence: CISA advisory on a Sisense breach with terabytes of customer data and exposed credentials; RansomHub extortion tied to Change Healthcare/ALPHV data; a massive El Salvador personal-data leak; APT activity (Earth Hundun/BlackTech, Starry Addax) and targeted espionage; malware and distribution developments (Raspberry Robin via obfuscated Windows Script Files, Waterbear backdoor, Rhadamanthys stealer using an AI-crafted PowerShell loader), malvertising campaigns targeting sysadmins, and social-engineering incidents including an audio deepfake targeting a LastPass employee—plus patch updates and policy/personnel notes.